The vulnerability lies in the MEARWService component of Zohocorp ManageEngine Malware Protection Plus, where driver signatures are not adequately validated. This shortcoming means that a driver that is not properly signed can be loaded into the kernel space, which may allow an attacker to execute arbitrary code with elevated privileges. The weakness corresponds to improper input validation (CWE‑20).

Affected systems are installations of ManageEngine Malware Protection Plus from Zohocorp, specifically versions prior to 1.0.64.12. The service MEARWService is the component that performs the signature check.

The CVSS score is 4.9, indicating medium severity. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. Because driver loading typically requires local rights, the likely attack surface is local or remote if a separate vulnerability can grant driver installation rights; however, the description does not provide explicit attack vector details.